java - Spring Security and Custom External Authentication -
i have such task - integrate web application external single sign-on service. it's custom non-standard implementation of sso based on setting specific cookie , redirecting application. sso , app on same domain.
currently i'm using spring security filter check cookie on specific url. works fine scenario :
web app -> sso[ supplied callback url] -> redirect app.
but fails when user visits app provides auth service , "jumps" url of app (and cookie not checked because "special" url not triggered).
what recommended approach solve such problem spring security?
thanks!
the simplest way solve problem implement own preauthenticatedprocessingfilter: http://static.springsource.org/spring-security/site/docs/3.1.x/reference/springsecurity-single.html#d0e6167
the question if authentication provider provides user name in cookie. if provides – can use filter: http://static.springsource.org/spring-security/site/docs/3.1.x/reference/springsecurity-single.html#d0e6295
please tell me if need additional clarifications.
best regards,
michael
Comments
Post a Comment